Content Spoofing
None
A
Acronis
Submitted None
Actions:
Reported by
full109tun
Vulnerability Details
Technical details and impact analysis
Vulnerability:
Content Spoofing or Text Injection
Description:
This vulnerability will reflect text on to the web page which is used to scam a victim to visit or send information to a malicious website. Because it is inside the domain and trusted web page, there is chances of scam. Open the Url and you will see it.
URL: https://registration.acronis.com/%20we%20are%20facing%20a%20heavy%20traffic,%20please%20visit%20our%20following%20website%20https://www.attacker.com%20to%20learn%20more
Reference:
https://owasp.org/www-community/attacks/Content_Spoofing
Screenshot is attached as a POC.
## Impact
It is used to scam victim and result will be dangerous.
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Phishing